Hi, Im having problems to display values in the control visualization, the field that I need to use is created by metricbeat.
in discovery I can see the values, and the field exist
In index patterns there is a field azure.resource.name
and azure.resource.name.keyword
when I choose aazure.resource.name.keyword
no values are displayed (tried with and without the visualization option: use time filter
) and the pop up says that the field doesnt exist.
when I choose azure.resource.name
the values are displayed
but it throws an error
that says :
Type
illegal_argument_exception
Reason
Text fields are not optimised for operations that require per-document field data like aggregations and sorting, so these operations are disabled by default. Please use a keyword field instead. Alternatively, set fielddata=true on [azure.resource.name] in order to load field data by uninverting the inverted index. Note that this can use significant memory.
What can I do to solve this?